Codex Local
bf1233d5df
ci / verify (push) Canceled after 0s
Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.
70 lines
3.1 KiB
Plaintext
70 lines
3.1 KiB
Plaintext
server {
|
|
listen 8080;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
|
|
location /api/ {
|
|
proxy_pass http://api:8080;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Request-Id $http_x_request_id;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
}
|
|
|
|
location /health/ {
|
|
proxy_pass http://api:8080;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Request-Id $http_x_request_id;
|
|
}
|
|
|
|
location /f/ {
|
|
proxy_pass http://api:8080;
|
|
proxy_set_header Host $host;
|
|
proxy_set_header X-Request-Id $http_x_request_id;
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
|
proxy_buffering off;
|
|
proxy_read_timeout 15m;
|
|
send_timeout 15m;
|
|
access_log off;
|
|
}
|
|
|
|
location /assets/ {
|
|
try_files $uri =404;
|
|
expires 1y;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-Frame-Options "DENY" always;
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always;
|
|
}
|
|
|
|
location = /index.html {
|
|
expires -1;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-Frame-Options "DENY" always;
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always;
|
|
# Ant Design v6 generates component styles at runtime and also relies on
|
|
# safe element-level layout styles. Tencent CAPTCHA 2.0 additionally
|
|
# loads CSS/JS from its CDN and runs a blob worker. Keep script sources
|
|
# explicit; neither inline scripts nor unsafe-eval are enabled.
|
|
add_header Content-Security-Policy "default-src 'self'; connect-src 'self' https: http://localhost:*; img-src 'self' data: blob: https:; media-src 'self' blob: https: http://localhost:*; style-src 'self' 'unsafe-inline' https://turing.captcha.gtimg.com https://turing.captcha.qcloud.com; script-src 'self' https://turing.captcha.gtimg.com https://turing.captcha.qcloud.com https://ssl.captcha.qq.com; frame-src https://turing.captcha.qcloud.com https://*.captcha.qcloud.com https://ssl.captcha.qq.com; frame-ancestors 'none'; base-uri 'self'; form-action 'self' https: http://localhost:*; worker-src 'self' blob:" always;
|
|
}
|
|
|
|
location = /runtime-config.js {
|
|
alias /tmp/runtime-config.js;
|
|
expires -1;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-Frame-Options "DENY" always;
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always;
|
|
}
|
|
|
|
location / {
|
|
try_files $uri $uri/ /index.html;
|
|
add_header X-Content-Type-Options "nosniff" always;
|
|
add_header X-Frame-Options "DENY" always;
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
|
add_header Permissions-Policy "camera=(), geolocation=(), microphone=()" always;
|
|
}
|
|
}
|